Objective 2.09 Explain Techniques to Simultaneously Configure Multiple AAA Profiles ( E.g., Two-Factor) 304 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a single BIG-IP APM device and wants to add a second device for high availability. The administrator has configured the two devices in a device group and synchronized the configuration. What additional step is required to ensure that AAA authentication sessions are preserved during a failover?

   • AConfigure a health monitor on the authentication server
   • BCreate a new AAA profile on the standby device with the same settings
   • CEnable connection mirroring for the virtual server that handles authentication traffic
   • DSet the standby device to active mode manually
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A financial institution has a pair of BIG-IP APM devices in an active/standby configuration. They are planning to introduce a new HTTPS-based authentication service for their customers. The security team mandates that authentication sessions must be preserved during a device failover to avoid customer disruption. The administrator has already configured the HTTPS AAA profile and added it to the access policy. What must the administrator do to ensure session persistence during failover?

   • ASet up a separate HTTPS AAA profile on the standby device
   • BUse a global load balancer to route users to the standby device during failover
   • CConfigure the HTTPS AAA profile to use a persistent cookie
   • DEnable connection mirroring on the virtual server and ensure the AAA profile has mirroring enabled
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   An organization is implementing two-factor authentication using a smart card and a PIN. The smart card authentication is handled by an external HTTPS service, and the PIN is verified against Active Directory. The administrator needs to configure the AAA profiles. Which approach correctly implements this two-factor authentication?

   • ACreate a single HTTPS AAA profile that handles both smart card and PIN authentication
   • BCreate an AD AAA profile and configure it to use the smart card service as a secondary authentication source
   • CCreate an HTTPS AAA profile for smart card authentication and an AD AAA profile for PIN verification, then add both to the access policy in sequence
   • DUse a RADIUS AAA profile to handle both smart card and PIN authentication
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is deploying APM for both VPN access and web portal access. The security team wants to use RADIUS for VPN authentication and LDAP for web portal authentication. The administrator needs to configure the AAA profiles to support both use cases. Which configuration approach is correct?

   • ACreate a single access policy that uses both RADIUS and LDAP AAA profiles simultaneously
   • BCreate a single AAA profile that supports both RADIUS and LDAP
   • CCreate two separate access policies, each with its own AAA profile (RADIUS for VPN, LDAP for web portal)
   • DUse RADIUS for both VPN and web portal authentication
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large enterprise has deployed BIG-IP APM in a high-availability pair. The administrator is configuring a new AAA profile for a critical application. The security team requires that authentication sessions be preserved during a failover. The administrator has enabled connection mirroring on the virtual server. What additional configuration is required to ensure the AAA profile's authentication state is mirrored?

   • ASet the standby device to active mode manually
   • BCreate a separate AAA profile on the standby device
   • CEnable mirroring on the AAA profile itself
   • DConfigure a health monitor on the authentication server
   Reveal Solution Discussion Select an answer first